SQL Injection vulnerability in SAP Business One B1i Layer

CVE-2023-33993

Summary

The B1i module of SAP Business One version 10.0 is susceptible to SQL injection, allowing an authenticated user with in-depth knowledge of the application to execute crafted SQL queries over the network. This vulnerability can potentially be exploited to read or modify sensitive SQL data, resulting in significant risks to the confidentiality, integrity, and availability of the application. Organizations using this module should prioritize immediate updates and enhance their security measures to mitigate potential threats.

References